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Question: 1 


Which SMTP extension does Cisco ESA support for email security? 


A. ETRN 

B. UTF8SMTP 
C. PIPELINING 
D. STARTTLS 


Answer: D 


Explanation: 


STARTTLS is an SMTP extension that allows email servers to negotiate a secure connection using TLS 
or SSL encryption. Cisco ESA supports STARTTLS for both inbound and outbound email delivery. 


Reference: User Guide for AsyncOS 15.0 for Cisco Secure Email Gateway, page 5-2. 


Reference: https://www.cisco.com/c/en/us/td/docs/security/esa/esa12-0/user_guide/ 
b_ESA_Admin_Guide_12_0/b_ESA_Admin_Guide_12_0_chapter_011000 


Question: 2 


Which feature utilizes sensor information obtained from Talos intelligence to filter email servers 
connecting into the Cisco ESA? 


A. SenderBase Reputation Filtering 
B. Connection Reputation Filtering 
C. Talos Reputation Filtering 

D. SpamCop Reputation Filtering 


Answer: A 


Explanation: 


SenderBase Reputation Filtering is a feature that allows Cisco ESA to reject or throttle connections 
from email servers based on their reputation score, which is calculated by Talos using sensor 
information from various sources. 


Reference: User Guide for AsyncOS 15.0 for Cisco Secure Email Gateway, page 6-2. 


Question: 3 
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When the Spam Quarantine is configured on the Cisco ESA, what validates end-users via LDAP during 
login to the End-User Quarantine? 


A. Enabling the End-User Safelist/Blocklist feature 

B. Spam Quarantine External Authentication Query 
C. Spam Quarantine End-User Authentication Query 
D. Spam Quarantine Alias Consolidation Query 


Answer: C 


Explanation: 


Spam Quarantine End-User Authentication Query is a query that Cisco ESA performs against an LDAP 
server to validate the end-user credentials during login to the End-User Quarantine. 


Reference: User Guide for AsyncOS 15.0 for Cisco Secure Email Gateway, page 10-9. 


Reference: https://www.cisco.com/c/en/us/support/docs/security/email-security-appliance/118692- 
configure- esa-00 


Question: 4 


Which benefit does enabling external spam quarantine on Cisco SMA provide? 
A. ability to back up spam quarantine from multiple Cisco ESAs to one central console 
B. access to the spam quarantine interface on which a user can release, duplicate, or delete 


C. ability to scan messages by using two engines to increase a catch rate 
D. ability to consolidate spam quarantine data from multiple Cisco ESA to one central console 


Answer: D 


Explanation: 


External spam quarantine is a feature that allows Cisco SMA to store and manage spam messages 
quarantined by multiple Cisco ESAs in one central location, providing a unified view and 
administration of the spam quarantine data. 


Reference: User Guide for AsyncOS 15.0 for Cisco Secure Email Gateway, page 10-3. 


Reference: https://www.cisco.com/c/en/us/td/docs/security/security_management/sma/sma11- 
O/user_guide/ b_ SMA_Admin_Guide/b_ SMA_Admin_Guide_chapter_010101 


Question: 5 


When email authentication is configured on Cisco ESA, which two key types should be selected on 
the signing profile? (Choose two.) 


A. DKIM 


B. Public Keys 
C. Domain Keys 
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D. Symmetric Keys 
E. Private Keys 


Answer: BE 


Explanation: 


With DomainKeys or DKIM email authentication, the sender signs the email using public key 
cryptography. Configuring DomainKeys and DKIM Signing A signing key is the private key stored on 


the appliance. https://www.cisco.com/c/en/us/td/docs/security/esa/esai1- 
1/user_guide/b ESA Admin Guide 11 1/b ESA Admin Guide chapter _010101?bookSearch 
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